Indodax hack fund tracker

2024-09-10 · about $25.2M stolen · Leaked key via infrastructure

Where did the Indodax funds go? From the 2 wallets Etherscan tags as the Indodax attacker, we see no transfers of $10K or more. Most funds pass through further wallets after the first hop, so this shows the first step only.
$25.2M
Stolen (DefiLlama)
2
Tagged attacker wallets
$0
Still in those wallets
Moved out of the tagged wallets
Last move out: none

Funds trail, step by step

StepWent toValue

The 2nd hop follows ETH sent on by the 10 wallets that received the most in the 1st hop. Funds can pass through the same wallets more than once, so these totals can be larger than the amount stolen. “Contracts” are smart contracts such as swap services, bridges and other apps without a public label in our lists; “plain wallets” are ordinary addresses. Laundering usually runs through many of both, and through other chains we don’t follow.

Tagged attacker wallets (2)

Etherscan tagAddressETH now
Indodax Exploiter 40x3B8F1131…35eB6d0.00
Indodax Exploiter 30x90FffbC0…5e904f0.00

Hack date, amount and method: DefiLlama hacks database. Attacker wallets: public Etherscan tags. Transfers read from the Ethereum blockchain, last updated 2026-10-27 12:40 UTC. Only ETH and tracked tokens are valued; transfers under $10K are left out. Information only. We don’t recover funds or identify people.

Questions

Where did the stolen Indodax funds go?

From the 2 wallets Etherscan tags as the Indodax attacker, we see no transfers of $10K or more. Most funds pass through further wallets after the first hop, so this shows the first step only.

How much is still in the Indodax attacker wallets?

About $0 in ETH and tracked tokens, read from the blockchain on 2026-10-27T12:40 UTC.

How much was stolen in the Indodax hack?

DefiLlama's hacks database records about $25.2M lost on 2024-09-10 (leaked key via infrastructure).

Does Deep Blue Alpha recover stolen funds?

No. We show public on-chain transfers from wallets that Etherscan has tagged. We don't trace funds beyond what is shown, recover assets, or identify people.